PT-2018-10226
CVE-2018-10988
·
تاريخ النشر
2018-07-05
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 2.0
7.2
عاليةالمقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Diqee360 devices (affected versions not specified)
Description
An issue was discovered where the firmware update process on Diqee360 devices executes code without a digital signature as root. This code execution occurs from specific pathnames on the microSD card, including
/mnt/sdcard/$PRO NAME/upgrade.sh and /sdcard/upgrage 360/upgrade.sh.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾